Requires certain procedures, reports, and training for municipalities, counties, and school districts in response to cybersecurity incidents.

This bill requires New Jersey municipalities, counties, and school districts to report cybersecurity incidents through a standardized online form developed by the Attorney General and the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC). Within 30 days of a report, the NJCCIC must contract an independent cybersecurity firm to audit the entity’s response and cybersecurity program, identifying vulnerabilities and recommending improvements. All relevant employees must complete annual cybersecurity training and verify completion to their governing body, with entities able to seek reimbursement for associated costs. Incident reports, audit findings, and corrective plans are exempt from public disclosure under the Open Public Records Act.